Trail of Bits
Audit Open Original ↗

Offchain Token Bridge Creator

Type

Security review

Client

Offchain Labs

Date

2023-12

Domain

Blockchain

Effort

6 wks

Section

Offchain Labs

Trail of Bits's security review of Offchain Labs (Dec 2023) identified 8 issues: 1 high, 2 medium, 3 low, and 2 informational.

Findings · 8

  1. 1 L2 runtime code does not contain constructor code Informational
  2. 2 L2 token bridge contract deployment can be griefed High
  3. 3 Incorrect L2 Multicall address predicted Low
  4. 4 Rollup owner is assumed to be an EOA Informational
  5. 5 Depositing before the token bridge is fully deployed can result in loss of funds Medium
  6. 6 Dangerous aliasing assumption Low
  7. 7 Unclear decimal units of provided amounts Low
  8. 8 Token values in DeployHelper are not adjusted to token decimals Medium

Findings extracted from the published report PDF. See the full report below for details and remediation.

Related